Release v0.6.10

What's Changed

• document builtin substitutions by @imjasonh in #1071
• fix test.environment jsonschema struct tag by @joshrwolf in #913
• Bump apko by @jonjohnsonjr in #1074
• build(deps): bump gitlab.alpinelinux.org/alpine/go from 0.8.1-0.20230928153721-5381bfaecf9b to 0.9.0 by @dependabot in #949
• build(deps): bump github.com/kubescape/go-git-url from 0.0.27 to 0.0.28 by @dependabot in #1080
• build(deps): bump google.golang.org/api from 0.168.0 to 0.169.0 by @dependabot in #1081
• build(deps): bump gitlab.alpinelinux.org/alpine/go from 0.9.0 to 0.10.0 by @dependabot in #1082
• feat(pipelines): Add cargo build for rust packages by @EyeCantCU in #1077
• Add Harden Runner audit configs by @jedsalazar in #1084
• open debug session in the specific workdir by @joshrwolf in #1085
• Move "executing:" logging to debug by @imjasonh in #1087
• Switch to new octo-sts action by @mattmoor in #1088
• build(deps): bump google.golang.org/api from 0.169.0 to 0.170.0 by @dependabot in #1093
• build(deps): bump dagger.io/dagger from 0.10.1 to 0.10.2 by @dependabot in #1089
• build(deps): bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in #1097
• build(deps): bump docker/login-action from 3.0.0 to 3.1.0 by @dependabot in #1098
• build(deps): bump github.com/google/go-containerregistry from 0.19.0 to 0.19.1 by @dependabot in #1095
• build(deps): bump cloud.google.com/go/storage from 1.39.0 to 1.39.1 by @dependabot in #1096
• build(deps): bump github.com/kubescape/go-git-url from 0.0.28 to 0.0.30 by @dependabot in #1094
• remove files from SBOM by @imjasonh in #1076
• Propagate user from image configuration by @jonjohnsonjr in #1099
• build(deps): bump github.com/docker/docker from 25.0.4+incompatible to 25.0.5+incompatible by @dependabot in #1100
• skip mounting resolv.conf for the docker runner by @joshrwolf in #1101
• Better go pipelines by @xnox in #1086
• build(deps): bump github.com/charmbracelet/log from 0.3.2-0.20240205220859-7a3834f9b367 to 0.4.0 by @dependabot in #1106
• build(deps): bump github.com/docker/cli from 25.0.4+incompatible to 26.0.0+incompatible by @dependabot in #1104
• build(deps): bump google.golang.org/api from 0.170.0 to 0.171.0 by @dependabot in #1105
• Python/sca updates by @smoser in #1102
• feat: Add build pipeline for R packages by @EyeCantCU in #1111

New Contributors

• @EyeCantCU made their first contribution in #1077
• @xnox made their first contribution in #1086
• @smoser made their first contribution in #1102

Full Changelog: v0.6.9...v0.6.10

Release v0.6.9

What's Changed

• Drop WaitDelay from bubblewrap by @jonjohnsonjr in #1067
• Fix the bug in dropping the suffix. by @vaikas in #1068
• build(deps): bump cloud.google.com/go/storage from 1.38.0 to 1.39.0 by @dependabot in #1059
• build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in #1060
• build(deps): bump actions/download-artifact from 4.1.2 to 4.1.4 by @dependabot in #1063
• build(deps): bump golang.org/x/sys from 0.17.0 to 0.18.0 by @dependabot in #1062
• build(deps): bump google.golang.org/api from 0.166.0 to 0.168.0 by @dependabot in #1069
• build(deps): bump dagger.io/dagger from 0.9.10 to 0.10.1 by @dependabot in #1070

Full Changelog: v0.6.8...v0.6.9

Release v0.6.8

What's Changed

• Update pombump.yaml by @pdeslaur in #1066

New Contributors

• @pdeslaur made their first contribution in #1066

Full Changelog: v0.6.7...v0.6.8

Release v0.6.7

What's Changed

• Rename the default bump file name. by @vaikas in #1065

Full Changelog: v0.6.6...v0.6.7

Release v0.6.6

What's Changed

• Add pombump pipeline. by @vaikas in #1054
• Add ${{cross.triplet.rust.[glibc,musl]}} by @jonjohnsonjr in #1057

Full Changelog: v0.6.5...v0.6.6

Release v0.6.5

What's Changed

• Bump apko by @jonjohnsonjr in #1051
• build(deps): bump cloud.google.com/go/storage from 1.37.0 to 1.38.0 by @dependabot in #1033
• build(deps): bump go.opentelemetry.io/otel/sdk from 1.23.1 to 1.24.0 by @dependabot in #1048
• Fix typo in error message by @jspeed-meyers in #1049
• build(deps): bump actions/upload-artifact from 4.3.0 to 4.3.1 by @dependabot in #1014
• build(deps): bump actions/download-artifact from 4.1.1 to 4.1.2 by @dependabot in #1013
• build(deps): bump golangci/golangci-lint-action from 3.7.0 to 4.0.0 by @dependabot in #1012
• build(deps): bump github.com/chainguard-dev/yam from 0.0.1 to 0.0.2 by @dependabot in #1035
• build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.23.1 to 1.24.0 by @dependabot in #1047
• Fix job control with interactive bubblewrap by @jonjohnsonjr in #1052
• Fix resource usage in melange by @jonjohnsonjr in #1053

Full Changelog: v0.6.4...v0.6.5

Release v0.6.4

What's Changed

• Propagate SourceDateEpoch from Build by @jonjohnsonjr in #1043
• Fix the yaml file so that it actually gets parsed properly. Details matter! by @vaikas in #1044

Full Changelog: v0.6.3...v0.6.4

Release v0.6.3

What's Changed

• Don't write APK to temp file during signing by @jonjohnsonjr in #1039

Full Changelog: v0.6.2...v0.6.3

Release v0.6.2

What's Changed

• Experimental Dagger Runner by @jonjohnsonjr in #987
• Add a --trace flag to melange build by @jonjohnsonjr in #1026
• label containers created by docker runner for easier external management by @joshrwolf in #1028
• add package name to docker labels by @joshrwolf in #1029
• apply package substitutions in test.environment.contents.packages by @rawlingsj in #1037
• Add --package-append flag to build by @jonjohnsonjr in #1038

Full Changelog: v0.6.1...v0.6.2

Release v0.6.1

What's Changed

• Allow substitutions in dependencies.replaces by @jonjohnsonjr in #1010
• Fix context.Background use by @jonjohnsonjr in #1018
• Remove images even with cancelled ctx by @jonjohnsonjr in #1019
• Clean up apko-temp dirs by @jonjohnsonjr in #1021
• version-transform and var-transform documentation by @mesaglio in #973
• Remove breakpoint labels by @jonjohnsonjr in #1024
• omit arch log key when building one arch by @imjasonh in #1025

Full Changelog: v0.6.0...v0.6.1